Legal

Privacy Policy

Last updated: 19 June 2026

This Privacy Policy explains how Audience Alchemy collects, uses, and protects personal data submitted through this website, in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who we are

Audience Alchemy ("we", "us", "our") is a UK-based growth marketing and shadow-operator service. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Audience Alchemy is the data controller for personal data submitted through this website.

If you have any questions about this policy or how your data is handled, please contact us via the enquiry form on the homepage.

2. What data we collect

When you complete our enquiry form, we collect:

  • Your name
  • Your email address
  • Your Instagram handle
  • Your location (city, region, or country you are based in)
  • The information you share about yourself in the message field

We also automatically collect limited technical data such as your browser type, device information, and approximate location derived from your IP address, for security and analytics purposes.

3. How we use your data and our lawful basis

We process your personal data on the following lawful bases under Article 6 of the UK GDPR:

  • Legitimate interests — to respond to your enquiry, assess whether our services are a fit, and contact you about working together.
  • Consent — where you opt in to receive further communications, marketing, or updates. You may withdraw consent at any time.
  • Legal obligation — to keep records required by UK tax, accounting, and regulatory law.

4. Who we share your data with

We do not sell your personal data. We may share it with:

  • Trusted service providers (e.g. email, hosting, form processing) acting as data processors under contract.
  • Professional advisors such as accountants or legal counsel where required.
  • Regulators or law enforcement where we are legally required to do so.

Some of our service providers may be based outside the UK. Where this is the case, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

5. How long we keep your data

We retain enquiry data for up to 24 months from your last contact with us, after which it is securely deleted, unless we are required to keep it longer for legal or accounting purposes. Client records are retained for up to 7 years to meet UK tax and accounting requirements.

6. How we protect your data

We use industry-standard technical and organisational measures to protect your personal data, including encrypted transmission (HTTPS), access controls, and secure third-party processors. No system is completely secure, but we take reasonable steps to safeguard your information.

7. Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data ("right to be forgotten")
  • Restrict or object to certain processing
  • Request data portability
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us via the enquiry form. We will respond within one month, as required by law.

8. Cookies and analytics

This site uses only essential cookies required for it to function. If we add analytics or marketing cookies in future, we will request your consent first via a cookie banner.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated where appropriate.

10. Contact

For any privacy-related questions or requests, please use the enquiry form on the homepage.